Corss-domain access for requests